Senior Security Engineer: Threat Modeling & Secure Architectures

Amazon Inc.; Arlington (VA); On-site; USD 140,000 - 210,000; Full time

Benefits offered by this job

Health insurance (medical, dental, and

Restricted stock units (RSUs)

Sign-on bonus

Job summary

Amazon is seeking a Security Engineer to tackle complex security challenges at scale, designing and validating security controls, conducting threat modeling, and driving risk mitigation across products and services.

You will work across teams to ensure systems are built securely from the ground up, mentor engineers, and shape how security is practiced across the organization, balancing pragmatic trade-offs with long-term security goals.

Qualifications

• 4+ years of non-internship troubleshooting and security task experience.
• 5+ years identifying security risks and developing mitigations.
• 4+ years scripting, programming, and security code review in common languages.
• Familiarity with at least two languages from Scala, Java, Python, C/C++, or Go.

Responsibilities

• Lead security reviews, threat modeling, and architecture assessments for complex systems, identifying risks and guiding teams toward scalable mitigations.
• Design and build security frameworks, runbooks, and rubrics for emerging problem domains, enabling repeatable security outcomes across multiple teams.
• Collaborate with product and system owners to design, implement, and validate security controls with low adoption costs.
• Evaluate code and designs to identify vulnerabilities and set best-practice security culture (auth, authz, least-privilege).
• Communicate risk and design decisions clearly in writing to technical and non-technical audiences; mentor engineers to raise security standards.

Skills

Systems troubleshooting

Security risk identification

Scripting & code review

Programming languages

Vulnerability management

Leadership

Threat modeling

Security in microservices

Job description

Amazon is seeking a Security Engineer to tackle complex security challenges at scale, designing and validating security controls, conducting threat modeling, and driving risk mitigation across products and services.

You will work across teams to ensure systems are built securely from the ground up, mentor engineers, and shape how security is practiced across the organization, balancing pragmatic trade-offs with long-term security goals.